Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
File:                     CAGEeJFIcaqw4cADbTYm661uIMw.mft (raw, json)
Hash identifier:          g3zYU34Mlr+X8kpXHgagSbbTHQKfscPhQR2HsWoL5pk=
Subject key identifier:   E5:DC:73:A9:55:6C:0A:FF:00:B3:D7:F6:35:1A:15:C2:B4:5F:8E:51
Authority key identifier: 08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
Certificate issuer:       /CN=08018478914871aab0e1c0036d3626ebad6e20cc
Certificate serial:       0190422E2CA8140C15015FEEFE5FCFF261BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
Manifest number:          0E13
Signing time:             Sat 22 Jun 2024 23:00:40 +0000
Manifest this update:     Sat 22 Jun 2024 23:00:40 +0000
Manifest next update:     Sun 23 Jun 2024 23:00:40 +0000
Files and hashes:         1: 0cnaMwGI7haCZzg1cZbbzDGuw_A.roa (hash: g88IbSDm0RX7fF8gohRsbiaq13IjbfsScF+DZ1Fn7eM=)
                          2: 7rcZDVNnUuemcGHJqOmJWPG5YOc.roa (hash: uMhL8XLfIiuCAjgm1wqweu2/tVfWPOdPdP+lryHN7os=)
                          3: CAGEeJFIcaqw4cADbTYm661uIMw.crl (hash: E3R9F83b6HUM+MdGBDAwqOIRR5OWp9+nhXivu3Y2LW4=)
                          4: XkfqfBSwVNaSCftxPN7L8a-UQz0.roa (hash: VnqTzLTv2U3iuNGIw2axB981kGXGhARLcpP5OTrgDdw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:42:2e:2c:a8:14:0c:15:01:5f:ee:fe:5f:cf:f2:61:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08018478914871aab0e1c0036d3626ebad6e20cc
        Validity
            Not Before: Jun 22 23:00:40 2024 GMT
            Not After : Jun 23 23:00:40 2024 GMT
        Subject: CN=e5dc73a9556c0aff00b3d7f6351a15c2b45f8e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ed:cf:bd:0f:3a:da:eb:e9:1a:c5:0f:38:5c:
                    ec:49:f5:ef:7c:2f:61:bc:2c:21:14:f0:8b:97:97:
                    c6:53:fb:6f:34:4e:0e:da:10:53:b2:75:ea:9d:c5:
                    f1:31:35:85:19:80:af:ff:68:ae:69:a6:ca:95:67:
                    56:c7:89:82:2d:20:05:53:0b:79:cd:1c:21:c0:a1:
                    e4:d1:05:6a:33:ff:52:ff:48:c1:79:9f:20:32:49:
                    7c:71:ff:cc:e0:23:cb:d8:b8:14:6b:04:86:a6:18:
                    0b:db:37:21:07:02:be:19:44:10:43:6f:c6:04:4d:
                    1c:0f:67:40:36:57:be:65:86:fd:f0:c2:3a:0c:21:
                    ae:28:72:ac:5b:0a:1e:4b:4b:84:c1:2e:50:77:13:
                    fc:fb:3e:11:a2:06:76:1c:77:61:ee:2b:f2:54:61:
                    43:b5:40:4a:1d:9b:a1:53:43:a5:85:6a:cf:9f:45:
                    ca:30:89:e7:c5:21:aa:ff:ad:a2:87:7f:bc:23:c6:
                    96:c2:37:b5:76:fd:2d:f4:da:af:65:8a:0a:b2:59:
                    66:23:ea:de:41:a7:dc:99:59:cf:ef:74:eb:a2:fa:
                    f4:f1:59:1a:34:94:eb:f5:92:37:ed:46:ee:59:ad:
                    7d:96:4c:0e:37:ac:2f:d1:c7:94:82:c2:07:ab:e6:
                    de:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:DC:73:A9:55:6C:0A:FF:00:B3:D7:F6:35:1A:15:C2:B4:5F:8E:51
            X509v3 Authority Key Identifier:
                keyid:08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:1f:a0:61:16:af:6f:b7:ef:b4:cd:61:af:8f:96:d4:7b:2e:
         3b:31:4e:c6:5e:03:1c:4f:b5:52:83:3a:9f:bc:92:4f:35:90:
         b3:c7:a8:bb:9d:4b:cb:84:01:f2:b4:2d:c3:b9:b6:3d:1f:b5:
         8f:b8:b4:91:10:24:eb:1f:32:76:81:b1:56:9a:69:ab:41:5d:
         bd:d8:f7:a2:56:92:2e:e1:4d:09:21:ff:5e:48:fa:a4:f6:0a:
         88:28:05:75:ee:1a:04:37:03:2f:7f:2d:5a:44:6f:c1:34:d5:
         f7:cf:0d:a4:10:92:75:28:fb:c7:e0:04:ca:89:bb:64:7f:fb:
         fe:af:79:5e:4d:f7:9d:a3:b6:7d:66:c4:40:21:8d:f4:cc:c6:
         6c:6a:8c:85:70:a2:71:76:b0:ec:e4:9f:fb:02:e4:77:3c:c3:
         34:20:08:0b:a8:55:1d:84:7d:15:b6:9f:47:36:6a:f2:32:11:
         36:1c:09:41:6f:30:61:30:7e:5a:6c:9d:7e:da:e0:d2:37:c8:
         1f:c3:63:67:aa:45:2a:20:dd:ce:d3:64:c5:9c:f2:d5:1e:6c:
         8d:ea:f5:55:7b:4e:b2:ab:a5:32:66:58:50:ec:95:86:09:7b:
         22:f2:98:70:f3:c5:ca:ab:1e:21:84:81:6a:f4:5c:88:c2:49:
         ab:bb:d0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:50:55 2024 by rpki-client on console-fra.rpki-client.org